DNSSEC Analyzer - BONDPRO.GOV

Domain Name:

Time: 2019-06-15 20:30:51 UTC, NTP stratum 4

Analyzing DNSSEC problems for BONDPRO.GOV

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 27289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190701000000 20190610000000 20326 . pW+2XLLS5ILjyUUHeTnnYqZe+riMHzwy1PudMkOZbhisIw6Gyh69a5EPO7YAozIYPnOlOzx72hdR YZvKeTIeCGo9WP985c4NDQyQTotZ6FCieZbemlE5zWQMSsdLle6oyH3V+iD64VwogVSTLgyI76J8 ANCRy0jthfYDc8p51FfaD/n2wVZ7Yh61BWVH9Wljos6N5Ij4XKDZvIHQqhLbFkk75LVRF0I33VOa W3skLOHKrTg8tniIFP8mFxgjHAYX4n8eJBtx08cCuJq1CrqSjyGijkv3xym+rqUSNs2fZ7i9HLQ1 9LiK+nGxbKNsPyihe5YtefOAK1YDHSYWqJ0cew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190701000000 20190610000000 20326 . pW+2XLLS5ILjyUUHeTnnYqZe+riMHzwy1PudMkOZbhisIw6Gyh69a5EPO7YAozIYPnOlOzx72hdR YZvKeTIeCGo9WP985c4NDQyQTotZ6FCieZbemlE5zWQMSsdLle6oyH3V+iD64VwogVSTLgyI76J8 ANCRy0jthfYDc8p51FfaD/n2wVZ7Yh61BWVH9Wljos6N5Ij4XKDZvIHQqhLbFkk75LVRF0I33VOa W3skLOHKrTg8tniIFP8mFxgjHAYX4n8eJBtx08cCuJq1CrqSjyGijkv3xym+rqUSNs2fZ7i9HLQ1 9LiK+nGxbKNsPyihe5YtefOAK1YDHSYWqJ0cew== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to i.root-servers.net for BONDPRO.GOV/A
	Received 669 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (669 bytes) ;; HEADER SECTION ;; id = 18499 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== ) ;; ADDITIONAL SECTION (9 records) d.gov-servers.net. 172800 IN A 81.19.194.30 c.gov-servers.net. 172800 IN A 69.36.153.30 b.gov-servers.net. 172800 IN A 209.112.123.30 a.gov-servers.net. 172800 IN A 69.36.157.30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for GOV/DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for GOV/DNSKEY: 'IPv6 transport disabled'
	Received 661 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (661 bytes) ;; HEADER SECTION ;; id = 13102 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) gov. 172800 IN NS d.gov-servers.net. gov. 172800 IN NS b.gov-servers.net. gov. 172800 IN NS c.gov-servers.net. gov. 172800 IN NS a.gov-servers.net. gov. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe gov. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== ) ;; ADDITIONAL SECTION (9 records) a.gov-servers.net. 172800 IN A 69.36.157.30 b.gov-servers.net. 172800 IN A 209.112.123.30 c.gov-servers.net. 172800 IN A 69.36.153.30 d.gov-servers.net. 172800 IN A 81.19.194.30 a.gov-servers.net. 172800 IN AAAA 2001:500:4431::2:30 b.gov-servers.net. 172800 IN AAAA 2620:74:27::2:30 c.gov-servers.net. 172800 IN AAAA 2620:74:28::2:30 d.gov-servers.net. 172800 IN AAAA 2620:74:29::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone GOV

GOV

	Checking DS between . and GOV
	Query to j.root-servers.net for GOV/DS
	Received 403 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (403 bytes) ;; HEADER SECTION ;; id = 55565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DS ;; ANSWER SECTION (3 records) GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 ) GOV. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for GOV in the . zone
	DS=7698/SHA-1 has algorithm RSASHA256
	DS=7698/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`GOV. 86400 IN RRSIG ( DS 8 1 86400 20190628050000 20190615040000 25266 . tKCNskgTdCTwfvhuUox/G0vfZ8R4ohCqR2xXPeaQj/XUAMORIqItQCV3pgTLVbxP9SA7r5JEvwVz P4DtgsMdCI2TSghLWSM9CyTQb/FYKz5ZKQxWK0WpbX+IpRVgfXP7dJyMVdbVYJM9tZ8JT9yRQHnB cs/c+HRW1qo48S8QnA3CydG8iEWlVjP/A2HqNzpPDLwo/lwvqsy9fcvD4mwD4fUi8prSwiBpi4Ie xVzzzNel3McCEFUsFCVVfSZXP5YFXzB8pvT2ikM8d1xSDAONrw29LZWqqE34uMoBtv3KFCHU0v9A 70XD/YceZkuDYWwUsI9fvhgJZDBeAjyFgnjZqw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=7698/SHA-1 is now in the chain-of-trust
	`GOV. 86400 IN DS 7698 8 1 6f109b46a80cea9613dc86d5a3e065520505aafe`
	`GOV. 86400 IN DS ( 7698 8 2 6bc949e638442ead0bdaf0935763c8d003760384ff15ebbd5ce86bb5559561f0 )`
	Query to d.gov-servers.net for GOV/DNSKEY
	Received 743 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (743 bytes) ;; HEADER SECTION ;; id = 47823 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; GOV. IN DNSKEY ;; ANSWER SECTION (3 records) GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583 GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698 GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190621214731 20190606214231 7698 gov. o4uebGhXUg2O6PQVdyTXQa+nv0WONwbTV8cfL0QDRmEjMCTK5HLpRs3Kc2ymttd+Ru+VmJtMzwxe 1RWJVN7QDg46BMxKuQX2eFyX7hhKq4VHC29WrDe/XEKvZWo3htwubMJxXUddOGZyFfrC2QD2YJhE 8kUjcrLZVx3UgBcXhh9mApa7/nbbEarK/molC2uCzQTL0hHKgif/rGEuWSdll1NMPhFQnE4gST5U f3hERzKmX/rmviZYZaKc+zcb6l6nBVJrT+rk/HaqP+fjreQiC7patugTn6mtXmiLDiQQhPxjTa5T 7Yy4+JXn7ochn9rJ1Ob/o0FndixY1LjsshOT9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for GOV
	`GOV. 86400 IN DNSKEY ( 256 3 8 AQPO0gfZTyKZiRSwF/XvW9ta+joX/SlCfvNcTsNT4t5edmGhhiRNf45246Z4L6Cx3n93FPHtW91n F+M1gCPyxewRyAM0/UVrqBwutdPQnR8vsQ/WzdsAk50loby/jGN7UAStU/FzllD2qIq4uJ8HcLZW Qth9JV8vKuqVYXgPfhx5lw== ) ; Key ID = 43583`
	`GOV. 86400 IN DNSKEY ( 257 3 8 AQO8daaz7B+yshOfL60rytKd9aOSujgponEw3fwBMEC3/+e9XzHw2k+VKnbJTZ+QaVtpfUd1q9HK ZIv/ck83Gl5TjYKE5jtUZ2kpEDZfVNGv6yx0smtWAXv1nCJS9ohnyOTd397eMojGDHqkEC+uojES cZheEkMxzgCZwDAs+/CSU7mSuHtCRZn19xlZUd5Gv7yDQ3mbOUwuy30oSk0z1Q5UUPpoihOugIZH FX6Jk7NLiW2wlqfq9qhV4zj7TiBiJY0mCc4zHN8/aq2VKDHp2Na7mWzvKyTy+SYQkBQ/08LbPwj9 YMc+uCzKL6sU/ObHv17EFhD8aPDftTHZvV9L+OZr ) ; Key ID = 7698`
	DNSKEY=7698/SEP is now in the chain-of-trust
	DS=7698/SHA-1 verifies DNSKEY=7698/SEP
	DS=7698/SHA-256 verifies DNSKEY=7698/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`GOV. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190621214731 20190606214231 7698 gov. o4uebGhXUg2O6PQVdyTXQa+nv0WONwbTV8cfL0QDRmEjMCTK5HLpRs3Kc2ymttd+Ru+VmJtMzwxe 1RWJVN7QDg46BMxKuQX2eFyX7hhKq4VHC29WrDe/XEKvZWo3htwubMJxXUddOGZyFfrC2QD2YJhE 8kUjcrLZVx3UgBcXhh9mApa7/nbbEarK/molC2uCzQTL0hHKgif/rGEuWSdll1NMPhFQnE4gST5U f3hERzKmX/rmviZYZaKc+zcb6l6nBVJrT+rk/HaqP+fjreQiC7patugTn6mtXmiLDiQQhPxjTa5T 7Yy4+JXn7ochn9rJ1Ob/o0FndixY1LjsshOT9w== )`
	RRSIG=7698 and DNSKEY=7698/SEP verifies the DNSKEY RRset
	DNSKEY=43583 is now in the chain-of-trust
	Query to b.gov-servers.net for BONDPRO.GOV/A
	Received 504 bytes from 209.112.123.30
	;; Answer received from 209.112.123.30 (504 bytes) ;; HEADER SECTION ;; id = 47487 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) BONDPRO.GOV. 86400 IN NS ns1.treasury.GOV. BONDPRO.GOV. 86400 IN NS ns3.treasury.GOV. BONDPRO.GOV. 3600 IN DS 2649 7 1 e114ebc680550f83c857b8c1d0f922b3448be8b9 BONDPRO.GOV. 3600 IN DS ( 62418 7 2 c0c6fe45a3923fca4bce70c292ea1f9e1298e9ef5495f374aee2f646b6ca7d98 ) BONDPRO.GOV. 3600 IN DS ( 2649 7 2 b091046f320afe87f237f48f01951574b35e1ed6628b0b14d05f8e60d1418716 ) BONDPRO.GOV. 3600 IN DS 62418 7 1 c9093ed40f27ccb854796231472913e71871e4d1 BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. EAh/ICIJpkxL+iQYdu5DhJheGn+VOk6G+T9P2t7Nq5TLEO3StFCloSroWIqNQGd7vspq4brf3/XM 3JPsyZ4YAATD+P9JWFTaLwvKY4BlN+5/OmaXNpqfvls2Etb5Bu81S7tu3Mgb7jnWRYxDdLR7dUEP ugJxqAvuOnm0ls/FcGY= ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gov-servers.net for BONDPRO.GOV/DNSKEY
	Received 504 bytes from 69.36.153.30
	;; Answer received from 69.36.153.30 (504 bytes) ;; HEADER SECTION ;; id = 59514 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) BONDPRO.GOV. 86400 IN NS ns1.treasury.GOV. BONDPRO.GOV. 86400 IN NS ns3.treasury.GOV. BONDPRO.GOV. 3600 IN DS 2649 7 1 e114ebc680550f83c857b8c1d0f922b3448be8b9 BONDPRO.GOV. 3600 IN DS ( 62418 7 2 c0c6fe45a3923fca4bce70c292ea1f9e1298e9ef5495f374aee2f646b6ca7d98 ) BONDPRO.GOV. 3600 IN DS ( 2649 7 2 b091046f320afe87f237f48f01951574b35e1ed6628b0b14d05f8e60d1418716 ) BONDPRO.GOV. 3600 IN DS 62418 7 1 c9093ed40f27ccb854796231472913e71871e4d1 BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. EAh/ICIJpkxL+iQYdu5DhJheGn+VOk6G+T9P2t7Nq5TLEO3StFCloSroWIqNQGd7vspq4brf3/XM 3JPsyZ4YAATD+P9JWFTaLwvKY4BlN+5/OmaXNpqfvls2Etb5Bu81S7tu3Mgb7jnWRYxDdLR7dUEP ugJxqAvuOnm0ls/FcGY= ) ;; ADDITIONAL SECTION (5 records) ns1.treasury.GOV. 86400 IN A 166.123.208.249 ns1.treasury.GOV. 86400 IN AAAA 2610:108:4000:100a::249 ns3.treasury.GOV. 86400 IN A 164.95.95.155 ns3.treasury.GOV. 86400 IN AAAA 2610:108:3000:100a::155 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone BONDPRO.GOV

BONDPRO.GOV

	Checking DS between GOV and BONDPRO.GOV
	Query to d.gov-servers.net for BONDPRO.GOV/DS
	Received 371 bytes from 81.19.194.30
	;; Answer received from 81.19.194.30 (371 bytes) ;; HEADER SECTION ;; id = 10380 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN DS ;; ANSWER SECTION (5 records) BONDPRO.GOV. 3600 IN DS 2649 7 1 e114ebc680550f83c857b8c1d0f922b3448be8b9 BONDPRO.GOV. 3600 IN DS ( 2649 7 2 b091046f320afe87f237f48f01951574b35e1ed6628b0b14d05f8e60d1418716 ) BONDPRO.GOV. 3600 IN DS 62418 7 1 c9093ed40f27ccb854796231472913e71871e4d1 BONDPRO.GOV. 3600 IN DS ( 62418 7 2 c0c6fe45a3923fca4bce70c292ea1f9e1298e9ef5495f374aee2f646b6ca7d98 ) BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. EAh/ICIJpkxL+iQYdu5DhJheGn+VOk6G+T9P2t7Nq5TLEO3StFCloSroWIqNQGd7vspq4brf3/XM 3JPsyZ4YAATD+P9JWFTaLwvKY4BlN+5/OmaXNpqfvls2Etb5Bu81S7tu3Mgb7jnWRYxDdLR7dUEP ugJxqAvuOnm0ls/FcGY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 4 DS records for BONDPRO.GOV in the GOV zone
	DS=2649/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=2649/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=62418/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=62418/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`BONDPRO.GOV. 3600 IN RRSIG ( DS 8 2 3600 20190622161007 20190615161007 43583 gov. EAh/ICIJpkxL+iQYdu5DhJheGn+VOk6G+T9P2t7Nq5TLEO3StFCloSroWIqNQGd7vspq4brf3/XM 3JPsyZ4YAATD+P9JWFTaLwvKY4BlN+5/OmaXNpqfvls2Etb5Bu81S7tu3Mgb7jnWRYxDdLR7dUEP ugJxqAvuOnm0ls/FcGY= )`
	RRSIG=43583 and DNSKEY=43583 verifies the DS RRset
	DS=2649/SHA-1 is now in the chain-of-trust
	DS=62418/SHA-1 is now in the chain-of-trust
	`BONDPRO.GOV. 3600 IN DS 2649 7 1 e114ebc680550f83c857b8c1d0f922b3448be8b9`
	`BONDPRO.GOV. 3600 IN DS ( 2649 7 2 b091046f320afe87f237f48f01951574b35e1ed6628b0b14d05f8e60d1418716 )`
	`BONDPRO.GOV. 3600 IN DS 62418 7 1 c9093ed40f27ccb854796231472913e71871e4d1`
	`BONDPRO.GOV. 3600 IN DS ( 62418 7 2 c0c6fe45a3923fca4bce70c292ea1f9e1298e9ef5495f374aee2f646b6ca7d98 )`
	Query to ns3.treasury.GOV for BONDPRO.GOV/DNSKEY
	Received 1828 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (1828 bytes) ;; HEADER SECTION ;; id = 12614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN DNSKEY ;; ANSWER SECTION (8 records) BONDPRO.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdTS04LvJmX6JmU+/ZdlGHgfydgesPmcOTuCLH44SJMi+ICOW99w9rRJAubIYatw2/ECO15A 4NbN51Z8oA7U1qF9mHR00K7gQGaMZfYk6EBiZz6+BlM+ZYSadnkYYrMC183sG527Z09SGnjyh802 9gX5GRzccmwoJX/oU2jBeFwJeK5la2O5XjvolUIf4FqgoEbBtg37DGRV5ydNtq7nVsPpEDw2/6/G PC3SgTP2aT6H9s6tN50JYzvO4AexpwPu16is4miyLE834bg9AD/RQeGpvZjDSQWzvg63oED975wN YayGxmmWOQuY9/Ki5B4icS+p+WLyMjCDrdcGA2Zs/rM= ) ; Key ID = 2649 BONDPRO.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAbJUwlz7m/A6LPyfpjsV8QVotX1nq1D/j0AFQgm8Gci+MD5hdbvGiCcjdph+2yMRmrp+7lFn mug4a2ZOYILkwcXaJrqFpufrqHN+zWS0yw9QWU36kmx4e6XBEFDBmA5MQUJOvg5HFaSvunOOS32+ fMzxNDlM5SIVIiVy7xq2jZMP ) ; Key ID = 32342 BONDPRO.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAcqZz4rscuaMhEXDPKJ+sjLwHtIKkOyvFGlm+ToCiuz82U5y/WTujGED7/QIA8/fH0fK6hSS HkMPlI4lwa2lIA67oh9tGVLWsW/B1KQZfUD+yg2tyq2TLNMdIJhXcoWykW/G14cjllKobaEkxwTs zuJStlXehVp2KvYNcKsii9EF ) ; Key ID = 50483 BONDPRO.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAbMJ+kV06C66BhYG//MWyDMjbaOUrdYnAIpzPaU/ITHffuq5RbUZBS+LMoBQfzOEuH2LaYdz rbwxs7Ugqvh/59IYPd+fSTrwl1Z6Xj8CovpuG3DOp90Z4SxchFPLoQKTlMJX6Q+H3x3Kx+DXZOut IukIgB96vaLnNrXLv9nvlfpxD2QQGSA3GVJnEwyfZzgf9fWQE30KcgBiyKD6y04QDle3UwtyN+vJ 8fEJK4gpBUmKC0kxk2ulSrhOkcYHnZ/QcoP1urjXHqVoej3lO1lszCVWXTwXblalGrwU9mCWhV0v vRoTTB3eg1W88ecq1Bpu6Gp2cavAlXUTOUxmXFkGU/0= ) ; Key ID = 62418 BONDPRO.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 2649 bondpro.gov. GLdZJYuRqhYM3xFpKGaOCKGUYMcoLbv/Rnc8Zje/ZyyFMPzz+45Dx5yt1ZCphTevmk6jgMpkbQ2t E61ElqPbCHUqg1+vv//+isYn8SW5tol8hakXmw8tf8lFskol6XJEoQfei8RGVJs5h/CVeVJ+MIKc RhZ4DI0FXKwza3jbj52wU7kta9CZk89Z/ute9TWZU2aZXwnMKDu1UJumd4VoQn+ZfLxl24/0+8nF EL+M7rifQwtvRiEoNf/x8tRqxMHM/tNJS4nTwH1g3+qdCN/FP5pvwGfy32yRkqajGSYxNa6rPkO9 YsiZrCdv+TyPT0URJRE7CuwzQ04oSFKIGMq9pA== ) bondpro.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 32342 bondpro.gov. hyr7evmbkCbDerRdkkVn7+f8mL5X33s/W/d1Xi3Mx+QpKy31pjQWJLZMH3Lrq3jq7P6+9Z1TtaQH pBsu7y3lf5pN2AmHb7qcvGDV19BRu3eETu9dbyelmhD6S05EMM45RoZ2oTUsPNuHRkPhg/SkQxBP 3lT1UBQ8JvYD7xxk/0M= ) bondpro.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 50483 bondpro.gov. bweEBhooHcCKBwrEMKQjjQcWectGEfah0jM8Zo1tfBfyAzRjnG44hr1bwPcVAvhLK8s9aRCBcvQG ySv/ns4mTbeO5kdAgm98HuGA32wzteRTFXqzAcj7q4adkYZ9sKS2BHbJ25IfL6VusR1v+WcBJTY8 RWxyAPM9Cdf7XohCfOY= ) bondpro.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 62418 bondpro.gov. AjFNPgeBgnqzWHfIhijAtpSUfz81AWH64Ztj2L8/oqYKDYnlV9ZvJ8x1dqcTrsU42BcbnIyViy0e pOuDeLZ26OWAxCcNBbv+9JAr2QaASE4X206Ur/uTl9p6/VXjR4i+st9OhSSEJygTgjEi9P7fvs9A E94FHaVZO3Oa5Q2gEPBaqWrYMffk4TTcjIj9+bfN53rB5ravfqNxKSVTJKRphK8Xd11jr2IPZZ+v UuKqZWMxV2wV+ICk73qG3YJmPdl1uNHq2pahOHCbDZZlhdTn2V/PI0R/st8p42nM07TMLC+hUEFj HuIcOtQHQogqPaOyrGURwpSIz0CdlieJazJE3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for BONDPRO.GOV
	`BONDPRO.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAdTS04LvJmX6JmU+/ZdlGHgfydgesPmcOTuCLH44SJMi+ICOW99w9rRJAubIYatw2/ECO15A 4NbN51Z8oA7U1qF9mHR00K7gQGaMZfYk6EBiZz6+BlM+ZYSadnkYYrMC183sG527Z09SGnjyh802 9gX5GRzccmwoJX/oU2jBeFwJeK5la2O5XjvolUIf4FqgoEbBtg37DGRV5ydNtq7nVsPpEDw2/6/G PC3SgTP2aT6H9s6tN50JYzvO4AexpwPu16is4miyLE834bg9AD/RQeGpvZjDSQWzvg63oED975wN YayGxmmWOQuY9/Ki5B4icS+p+WLyMjCDrdcGA2Zs/rM= ) ; Key ID = 2649`
	`BONDPRO.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAbJUwlz7m/A6LPyfpjsV8QVotX1nq1D/j0AFQgm8Gci+MD5hdbvGiCcjdph+2yMRmrp+7lFn mug4a2ZOYILkwcXaJrqFpufrqHN+zWS0yw9QWU36kmx4e6XBEFDBmA5MQUJOvg5HFaSvunOOS32+ fMzxNDlM5SIVIiVy7xq2jZMP ) ; Key ID = 32342`
	`BONDPRO.GOV. 172800 IN DNSKEY ( 256 3 7 AwEAAcqZz4rscuaMhEXDPKJ+sjLwHtIKkOyvFGlm+ToCiuz82U5y/WTujGED7/QIA8/fH0fK6hSS HkMPlI4lwa2lIA67oh9tGVLWsW/B1KQZfUD+yg2tyq2TLNMdIJhXcoWykW/G14cjllKobaEkxwTs zuJStlXehVp2KvYNcKsii9EF ) ; Key ID = 50483`
	`BONDPRO.GOV. 172800 IN DNSKEY ( 257 3 7 AwEAAbMJ+kV06C66BhYG//MWyDMjbaOUrdYnAIpzPaU/ITHffuq5RbUZBS+LMoBQfzOEuH2LaYdz rbwxs7Ugqvh/59IYPd+fSTrwl1Z6Xj8CovpuG3DOp90Z4SxchFPLoQKTlMJX6Q+H3x3Kx+DXZOut IukIgB96vaLnNrXLv9nvlfpxD2QQGSA3GVJnEwyfZzgf9fWQE30KcgBiyKD6y04QDle3UwtyN+vJ 8fEJK4gpBUmKC0kxk2ulSrhOkcYHnZ/QcoP1urjXHqVoej3lO1lszCVWXTwXblalGrwU9mCWhV0v vRoTTB3eg1W88ecq1Bpu6Gp2cavAlXUTOUxmXFkGU/0= ) ; Key ID = 62418`
	DNSKEY=2649/SEP is now in the chain-of-trust
	DS=2649/SHA-1 verifies DNSKEY=2649/SEP
	DS=2649/SHA-256 verifies DNSKEY=2649/SEP
	DNSKEY=62418/SEP is now in the chain-of-trust
	DS=62418/SHA-1 verifies DNSKEY=62418/SEP
	DS=62418/SHA-256 verifies DNSKEY=62418/SEP
	Found 4 RRSIGs over DNSKEY RRset
	`BONDPRO.GOV. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 2649 bondpro.gov. GLdZJYuRqhYM3xFpKGaOCKGUYMcoLbv/Rnc8Zje/ZyyFMPzz+45Dx5yt1ZCphTevmk6jgMpkbQ2t E61ElqPbCHUqg1+vv//+isYn8SW5tol8hakXmw8tf8lFskol6XJEoQfei8RGVJs5h/CVeVJ+MIKc RhZ4DI0FXKwza3jbj52wU7kta9CZk89Z/ute9TWZU2aZXwnMKDu1UJumd4VoQn+ZfLxl24/0+8nF EL+M7rifQwtvRiEoNf/x8tRqxMHM/tNJS4nTwH1g3+qdCN/FP5pvwGfy32yRkqajGSYxNa6rPkO9 YsiZrCdv+TyPT0URJRE7CuwzQ04oSFKIGMq9pA== )`
	`bondpro.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 32342 bondpro.gov. hyr7evmbkCbDerRdkkVn7+f8mL5X33s/W/d1Xi3Mx+QpKy31pjQWJLZMH3Lrq3jq7P6+9Z1TtaQH pBsu7y3lf5pN2AmHb7qcvGDV19BRu3eETu9dbyelmhD6S05EMM45RoZ2oTUsPNuHRkPhg/SkQxBP 3lT1UBQ8JvYD7xxk/0M= )`
	`bondpro.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 50483 bondpro.gov. bweEBhooHcCKBwrEMKQjjQcWectGEfah0jM8Zo1tfBfyAzRjnG44hr1bwPcVAvhLK8s9aRCBcvQG ySv/ns4mTbeO5kdAgm98HuGA32wzteRTFXqzAcj7q4adkYZ9sKS2BHbJ25IfL6VusR1v+WcBJTY8 RWxyAPM9Cdf7XohCfOY= )`
	`bondpro.gov. 172800 IN RRSIG ( DNSKEY 7 2 172800 20190619193049 20190615190029 62418 bondpro.gov. AjFNPgeBgnqzWHfIhijAtpSUfz81AWH64Ztj2L8/oqYKDYnlV9ZvJ8x1dqcTrsU42BcbnIyViy0e pOuDeLZ26OWAxCcNBbv+9JAr2QaASE4X206Ur/uTl9p6/VXjR4i+st9OhSSEJygTgjEi9P7fvs9A E94FHaVZO3Oa5Q2gEPBaqWrYMffk4TTcjIj9+bfN53rB5ravfqNxKSVTJKRphK8Xd11jr2IPZZ+v UuKqZWMxV2wV+ICk73qG3YJmPdl1uNHq2pahOHCbDZZlhdTn2V/PI0R/st8p42nM07TMLC+hUEFj HuIcOtQHQogqPaOyrGURwpSIz0CdlieJazJE3A== )`
	RRSIG=2649 and DNSKEY=2649/SEP verifies the DNSKEY RRset
	RRSIG=32342 and DNSKEY=32342 verifies the DNSKEY RRset
	RRSIG=50483 and DNSKEY=50483 verifies the DNSKEY RRset
	RRSIG=62418 and DNSKEY=62418/SEP verifies the DNSKEY RRset
	DNSKEY=32342 is now in the chain-of-trust
	DNSKEY=50483 is now in the chain-of-trust
	Query to ns3.treasury.GOV for BONDPRO.GOV/A
	Received 873 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (873 bytes) ;; HEADER SECTION ;; id = 3471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (3 records) BONDPRO.GOV. 86400 IN A 166.123.219.80 BONDPRO.GOV. 86400 IN RRSIG ( A 7 2 86400 20190619025027 20190615023749 32342 bondpro.gov. S0BZzxBZRrQsfryrIDiuqKwBM0b5J/jKeJ+W9RWEhu4uD/yMiAFSq9tiRanBmOkwB36DRejE2y8S HaV8UOHcIQG5uTP+OH5VhcTbTgeVYgXZ8/V+g3WCFL5SZ9+XP06iiHm5edsn7xuEcz23iaXKv6fa unr2NV9FGCPqyA4qVZM= ) bondpro.gov. 86400 IN RRSIG ( A 7 2 86400 20190619025027 20190615023749 50483 bondpro.gov. A9EzJUBwt3Hthx5ge3H/pmRI/gByjCGDCOWck2xf0SRo4xMq9UM0Qre1XHtwajgdYAvRaGTo9j8k Asm2gJnP6nTgJl0r1kWqmFks3rw1g9MhLtNOKiVsYYaWY1MxVd4g6IggQ0HZRz1uwE7z0ZnxJyRI zFy7Ut86dCoJw5u68Js= ) ;; AUTHORITY SECTION (4 records) bondpro.gov. 28800 IN NS ns3.treasury.gov. bondpro.gov. 28800 IN NS ns1.treasury.gov. bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 32342 bondpro.gov. Wvrs1dtRoIBf7UeStTPDHG7QWOo5uXvivHiYP7Eb9gaAPoN486gk3K8vy6jwvcsXIewY5pL873E/ CCQQB0EEhUAWq4tiZe+E/rckr34840DhKpA8aucTPkwuY451BO7kINzwlKsi5MQXiWyILODrJ6WQ gwY+TR1fwzl9D2WO+04= ) bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 50483 bondpro.gov. tFiEHmQxYVZTxQ6UriBmDDY4zsm/chjoFaTrZoHHCToIZ/+ewzIQNltnFiWx4zUg7TeWYk4NAF9S 13Q4p8oA21ADC4aTrXvVIOvK+xk0n5RaULNTOJ1RTyr63vVsZU/TTWsD+CvqVnsNwnGvvYIesupj X8U2NMURzjTE0CMzIo8= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BONDPRO.GOV is authoritative for BONDPRO.GOV
	Found RRSIG signed by bondpro.gov zone
	Query to ns3.treasury.gov for BONDPRO.GOV/SOA
	Error querying ns3.treasury.gov/2610:108:3000:100a:0:0:0:155 for BONDPRO.GOV/SOA: 'IPv6 transport disabled'
	Received 912 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (912 bytes) ;; HEADER SECTION ;; id = 7920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN SOA ;; ANSWER SECTION (3 records) BONDPRO.GOV. 28800 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2006153951 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) BONDPRO.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20190619200029 20190615190029 32342 bondpro.gov. lVr7EDR+/vb7zL9Rnyd2aPmDyPKRQ16s8VJ8UWyDVV2BX4CKzO7wVCRnk4V9Z/vJNpgghhbrlZ35 zuRvtO6eALCcTki7LFhIlddVdnWhJ83P2qoAVYH6VSZpeqbWEgaYWlU9BtR0G1CerEmpDrna7tLQ 5Q1QpHbE4L5Ji5a8XjE= ) bondpro.gov. 28800 IN RRSIG ( SOA 7 2 28800 20190619200029 20190615190029 50483 bondpro.gov. Hb8vWJIvBNW2A9JBJz5LtDD2ELoCu0qcTeFDB8spm0qdKkRpfiCt5sBNZB5m/puuYIl++bNl/rVu ByUGUqDeKMG9AswahHsgEQNj56FJY/A0WvaKL8vu8ZPcFpWXp+Pfq23MTK/ao46bODyJMd42Eesg X2Ybc4GOJ7WGUeCecF0= ) ;; AUTHORITY SECTION (4 records) bondpro.gov. 28800 IN NS ns1.treasury.GOV. bondpro.gov. 28800 IN NS ns3.treasury.GOV. bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 32342 bondpro.gov. Wvrs1dtRoIBf7UeStTPDHG7QWOo5uXvivHiYP7Eb9gaAPoN486gk3K8vy6jwvcsXIewY5pL873E/ CCQQB0EEhUAWq4tiZe+E/rckr34840DhKpA8aucTPkwuY451BO7kINzwlKsi5MQXiWyILODrJ6WQ gwY+TR1fwzl9D2WO+04= ) bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 50483 bondpro.gov. tFiEHmQxYVZTxQ6UriBmDDY4zsm/chjoFaTrZoHHCToIZ/+ewzIQNltnFiWx4zUg7TeWYk4NAF9S 13Q4p8oA21ADC4aTrXvVIOvK+xk0n5RaULNTOJ1RTyr63vVsZU/TTWsD+CvqVnsNwnGvvYIesupj X8U2NMURzjTE0CMzIo8= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.treasury.gov for BONDPRO.GOV/SOA
	Error querying ns1.treasury.gov/2610:108:4000:100a:0:0:0:249 for BONDPRO.GOV/SOA: 'IPv6 transport disabled'
	Received 912 bytes from 166.123.208.249
	;; Answer received from 166.123.208.249 (912 bytes) ;; HEADER SECTION ;; id = 43160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN SOA ;; ANSWER SECTION (3 records) BONDPRO.GOV. 28800 IN SOA ( ns1.treasury.GOV. webadmin.bpd.treas.GOV. 2006153951 ;serial 10800 ;refresh 1080 ;retry 1209600 ;expire 1800 ;minimum ) BONDPRO.GOV. 28800 IN RRSIG ( SOA 7 2 28800 20190619200029 20190615190029 32342 bondpro.gov. lVr7EDR+/vb7zL9Rnyd2aPmDyPKRQ16s8VJ8UWyDVV2BX4CKzO7wVCRnk4V9Z/vJNpgghhbrlZ35 zuRvtO6eALCcTki7LFhIlddVdnWhJ83P2qoAVYH6VSZpeqbWEgaYWlU9BtR0G1CerEmpDrna7tLQ 5Q1QpHbE4L5Ji5a8XjE= ) bondpro.gov. 28800 IN RRSIG ( SOA 7 2 28800 20190619200029 20190615190029 50483 bondpro.gov. Hb8vWJIvBNW2A9JBJz5LtDD2ELoCu0qcTeFDB8spm0qdKkRpfiCt5sBNZB5m/puuYIl++bNl/rVu ByUGUqDeKMG9AswahHsgEQNj56FJY/A0WvaKL8vu8ZPcFpWXp+Pfq23MTK/ao46bODyJMd42Eesg X2Ybc4GOJ7WGUeCecF0= ) ;; AUTHORITY SECTION (4 records) bondpro.gov. 28800 IN NS ns1.treasury.GOV. bondpro.gov. 28800 IN NS ns3.treasury.GOV. bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 32342 bondpro.gov. Wvrs1dtRoIBf7UeStTPDHG7QWOo5uXvivHiYP7Eb9gaAPoN486gk3K8vy6jwvcsXIewY5pL873E/ CCQQB0EEhUAWq4tiZe+E/rckr34840DhKpA8aucTPkwuY451BO7kINzwlKsi5MQXiWyILODrJ6WQ gwY+TR1fwzl9D2WO+04= ) bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 50483 bondpro.gov. tFiEHmQxYVZTxQ6UriBmDDY4zsm/chjoFaTrZoHHCToIZ/+ewzIQNltnFiWx4zUg7TeWYk4NAF9S 13Q4p8oA21ADC4aTrXvVIOvK+xk0n5RaULNTOJ1RTyr63vVsZU/TTWsD+CvqVnsNwnGvvYIesupj X8U2NMURzjTE0CMzIo8= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.GOV. 300 IN A 164.95.95.155 ns3.treasury.GOV. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.GOV. 300 IN A 166.123.208.249 ns1.treasury.GOV. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.treasury.GOV for BONDPRO.GOV/A
	Received 873 bytes from 164.95.95.155
	;; Answer received from 164.95.95.155 (873 bytes) ;; HEADER SECTION ;; id = 19853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; BONDPRO.GOV. IN A ;; ANSWER SECTION (3 records) BONDPRO.GOV. 86400 IN A 166.123.219.80 BONDPRO.GOV. 86400 IN RRSIG ( A 7 2 86400 20190619025027 20190615023749 32342 bondpro.gov. S0BZzxBZRrQsfryrIDiuqKwBM0b5J/jKeJ+W9RWEhu4uD/yMiAFSq9tiRanBmOkwB36DRejE2y8S HaV8UOHcIQG5uTP+OH5VhcTbTgeVYgXZ8/V+g3WCFL5SZ9+XP06iiHm5edsn7xuEcz23iaXKv6fa unr2NV9FGCPqyA4qVZM= ) bondpro.gov. 86400 IN RRSIG ( A 7 2 86400 20190619025027 20190615023749 50483 bondpro.gov. A9EzJUBwt3Hthx5ge3H/pmRI/gByjCGDCOWck2xf0SRo4xMq9UM0Qre1XHtwajgdYAvRaGTo9j8k Asm2gJnP6nTgJl0r1kWqmFks3rw1g9MhLtNOKiVsYYaWY1MxVd4g6IggQ0HZRz1uwE7z0ZnxJyRI zFy7Ut86dCoJw5u68Js= ) ;; AUTHORITY SECTION (4 records) bondpro.gov. 28800 IN NS ns1.treasury.gov. bondpro.gov. 28800 IN NS ns3.treasury.gov. bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 32342 bondpro.gov. Wvrs1dtRoIBf7UeStTPDHG7QWOo5uXvivHiYP7Eb9gaAPoN486gk3K8vy6jwvcsXIewY5pL873E/ CCQQB0EEhUAWq4tiZe+E/rckr34840DhKpA8aucTPkwuY451BO7kINzwlKsi5MQXiWyILODrJ6WQ gwY+TR1fwzl9D2WO+04= ) bondpro.gov. 28800 IN RRSIG ( NS 7 2 28800 20190619010756 20190615001629 50483 bondpro.gov. tFiEHmQxYVZTxQ6UriBmDDY4zsm/chjoFaTrZoHHCToIZ/+ewzIQNltnFiWx4zUg7TeWYk4NAF9S 13Q4p8oA21ADC4aTrXvVIOvK+xk0n5RaULNTOJ1RTyr63vVsZU/TTWsD+CvqVnsNwnGvvYIesupj X8U2NMURzjTE0CMzIo8= ) ;; ADDITIONAL SECTION (5 records) ns3.treasury.gov. 300 IN A 164.95.95.155 ns3.treasury.gov. 300 IN AAAA 2610:108:3000:100a::155 ns1.treasury.gov. 300 IN A 166.123.208.249 ns1.treasury.gov. 300 IN AAAA 2610:108:4000:100a::249 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	BONDPRO.GOV A RR has value 166.123.219.80
	Found 2 RRSIGs over A RRset
	`BONDPRO.GOV. 86400 IN RRSIG ( A 7 2 86400 20190619025027 20190615023749 32342 bondpro.gov. S0BZzxBZRrQsfryrIDiuqKwBM0b5J/jKeJ+W9RWEhu4uD/yMiAFSq9tiRanBmOkwB36DRejE2y8S HaV8UOHcIQG5uTP+OH5VhcTbTgeVYgXZ8/V+g3WCFL5SZ9+XP06iiHm5edsn7xuEcz23iaXKv6fa unr2NV9FGCPqyA4qVZM= )`
	`bondpro.gov. 86400 IN RRSIG ( A 7 2 86400 20190619025027 20190615023749 50483 bondpro.gov. A9EzJUBwt3Hthx5ge3H/pmRI/gByjCGDCOWck2xf0SRo4xMq9UM0Qre1XHtwajgdYAvRaGTo9j8k Asm2gJnP6nTgJl0r1kWqmFks3rw1g9MhLtNOKiVsYYaWY1MxVd4g6IggQ0HZRz1uwE7z0ZnxJyRI zFy7Ut86dCoJw5u68Js= )`
	RRSIG=32342 and DNSKEY=32342 verifies the A RRset
	RRSIG=50483 and DNSKEY=50483 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test BONDPRO.GOV at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: